CVE-2015-6492

Rockwell Automation’s MicroLogix 1100 and 1400 PLCs are affected by CVE-2015-6492, which allows a remote attacker to cause a denial of service via a crafted HTTP request. Affected devices: MicroLogix 1100 hardware Series B with firmware version 14.000 or earlier (B FRN 15.000 mitigation) and Micr...

CVE-2015-6492

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service memory corruption and device crash via a crafted HTTP request...

CVE-2015-6492

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service memory corruption and device crash via a crafted HTTP request...

CVE-2015-6490

Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-6491

Rockwell Automation MicroLogix 1100 and 1400 PLCs are affected by CVE-2015-6491. Specifically, MicroLogix 1100 controllers (Series B) with firmware version 14.000 and earlier are mitigated by updating to 15.000, while MicroLogix 1400 controllers (Series B) with firmware 15.003 and earlier require...

CVE-2015-6488: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-2582

Name of the Vulnerable Software and Affected Versions Allen-Bradley MicroLogix 1100 versions before B FRN 15.000 Allen-Bradley MicroLogix 1400 versions before B FRN 15.003 Description The issue is caused by a buffer overflow, allowing a remote attacker to cause a denial of service via a specially...

PT-2015-2585

Name of the Vulnerable Software and Affected Versions Allen-Bradley MicroLogix 1100 versions before B FRN 15.000 Allen-Bradley MicroLogix 1400 versions before B FRN 15.003 Description The issue is related to a cross-site scripting XSS vulnerability in the web server of the affected devices. This...

PT-2015-2584

Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions before B FRN 15.000 Micrologix 1400 versions through B FRN 15.003 Description The issue is caused by a stack-based buffer overflow. This allows a remote attacker to execute arbitrary code. Recommendations For Micrologi...

CVE-2015-6491: Undefined Security Weakness

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors...

CVE-2015-6492: Improper Restriction of Operations within the Bounds of a Memory Buffer

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service memory corruption and device crash via a crafted HTTP request...

PT-2015-2586

Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions before B FRN 15.000 Micrologix 1400 versions before B FRN 15.003 Description The issue is related to a lack of protection against SQL query structure attacks. Exploitation of this issue may allow a remote attacker to...

CVE-2015-6490: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors...

PT-2015-2583

Name of the Vulnerable Software and Affected Versions Allen-Bradley MicroLogix 1100 versions before B FRN 15.000 Allen-Bradley MicroLogix 1400 versions before B FRN 15.003 Description The issue is related to a lack of restrictions on file uploads in the programmable logic controllers MicroLogix...

CVE-2015-6486: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-3357

Name of the Vulnerable Software and Affected Versions Micrologix 1100 versions prior to 16.00 Micrologix 1400 versions prior to 16.00 Description The issue is related to the use of weak passwords, specifically numeric passwords with a small maximum character size. This could allow a remote attack...

PT-2017-53: Weak Password in Rockwell Automation Micrologix 1100 and 1400 PLC

The specialists of the Positive Research center have detected weak passwords in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in programmable-logic controllers, due to usage of numeric passwords with a small maximum character size for the password, allows attackers to bypass...

PT-2015-3356

Name of the Vulnerable Software and Affected Versions Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers versions 16.00 and prior Rockwell Automation Allen-Bradley MicroLogix 1400 programmable logic controllers versions 16.00 and prior Description An Information...

PT-2017-52: Information Disclosure in Rockwell Automation Micrologix 1100 and 1400 PLC

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in programmable-logic controllers, caused by sending user credentials to the web server using a HTTP GET method, allows attacker...

Rockwell Automation ControlLogix 远程拒绝服务漏洞

漏洞起因 边界条件错误影响系统Rockwell Automation Micrologix 1400 Rockwell Automation Micrologix 1100远程攻击者可以利用漏洞使设备崩溃。攻击所需条件 攻击者必须访问Rockwell Automation MicroLogix产品。漏洞信息Rockwell Automation MicroLogix是一款可编程控制器平台。 设备没有校验要拷贝到缓冲区的数据，允许远程攻击者可以向2222/TCP, 2222/UDP,...